Ixolate Security Gateway

Ixolate provides a comprehensive security gateway solution that addresses the need for segmented networks without requiring public IP addresses for every branch. The appliance inspects, routes, and encrypts traffic, which simplifies the network architecture significantly. The ability to route encrypted tunnels between sites allows small offices to connect securely without exposing themselves to the internet. The default deny policy and the clear logging of pass, block, and rdr actions provide excellent visibility into network activity. It is reassuring that the device handles failover by copying the session table, ensuring that active connections are not dropped when a link fails. The assessment process is free and results in a written read, which helps in understanding the specific needs of the organization before committing to a design. The licensing is bound to the hardware, which simplifies activation and management. Overall, the solution seems well-suited for organizations that require robust network segmentation and security without complex configurations.

The session table copy feature is absolutely brilliant! When a link drops, the standby device takes over instantly and connections stay up. This is a game-changer for our branch offices that need continuous connectivity. The ability to keep VLANs segmented while ensuring encrypted tunnels work flawlessly is impressive. It feels like we have total control over our network security without sacrificing performance. The fact that every change leaves a visible trail adds so much confidence during audits. We were worried about downtime during hardware failures, but this appliance handles it seamlessly. It is reassuring to know that the responsibility line is clear and that we have a solid foundation for our network infrastructure.

The website does not clearly specify what is included in the deployment scope or the exact response targets for the two tiers of support contracts.

Ixolate offers a free assessment, which sounds helpful, but the pricing model leaves a lot to be desired for those of us who prefer transparency. The website clearly states there is no price list because a clinic with twenty users and a large ISP might run the same device. This means the cost is entirely dependent on your specific topology and risk profile. While this makes sense from a business perspective, it requires you to wait for a custom quote after the design phase. You cannot know if you can afford the solution until the scope is real. For someone considering this company, this delay in pricing visibility is significant. You hold the business policy and configuration responsibility, so you need to know the financial commitment before committing to the deployment. The process seems robust, but the financial uncertainty is a genuine hurdle for budget-conscious organizations looking for predictable costs.